use the 'sudo' group instead of 'admin'